Tracking end-users in web databases

Boris Rozenberg; Yaron Gonen; Ehud Gudes; Nurit Gal-Oz; Erez Shmueli

doi:10.1109/ICNSS.2011.6059966

Tracking end-users in web databases

Boris Rozenberg, Yaron Gonen, Ehud Gudes, Nurit Gal-Oz, Erez Shmueli

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

2 Scopus citations

Abstract

When a database is accessed via a web application, users usually receive a pooled connection to the database. From a database point of view, such a connection is always established by the same user (i.e. the web application) and specific data on the end user is not available. As a consequence, users' specific transactions cannot be audited and fine-grained access control cannot be enforced at the database level. In this paper we propose a method and a system which provide the ability to track the end users in web databases. The new method can be applied to legacy web applications without requiring any changes in their existing infrastructure. Furthermore, the new users tracking ability provides a basis for native database protection mechanisms, and intrusion detection systems.

Original language	English
Title of host publication	Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011
Pages	105-112
Number of pages	8
DOIs	https://doi.org/10.1109/ICNSS.2011.6059966
State	Published - 17 Nov 2011
Event	2011 5th International Conference on Network and System Security, NSS 2011 - Milan, Italy Duration: 6 Sep 2011 → 8 Sep 2011

Publication series

Name	Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011

Conference

Conference	2011 5th International Conference on Network and System Security, NSS 2011
Country/Territory	Italy
City	Milan
Period	6/09/11 → 8/09/11

Keywords

DB users tracking
auditing
web users tracking

ASJC Scopus subject areas

Computer Networks and Communications
Control and Systems Engineering
Safety, Risk, Reliability and Quality

Access to Document

10.1109/ICNSS.2011.6059966

Cite this

@inproceedings{1a8fae35982e41a982e7e2d0372879a6,

title = "Tracking end-users in web databases",

abstract = "When a database is accessed via a web application, users usually receive a pooled connection to the database. From a database point of view, such a connection is always established by the same user (i.e. the web application) and specific data on the end user is not available. As a consequence, users' specific transactions cannot be audited and fine-grained access control cannot be enforced at the database level. In this paper we propose a method and a system which provide the ability to track the end users in web databases. The new method can be applied to legacy web applications without requiring any changes in their existing infrastructure. Furthermore, the new users tracking ability provides a basis for native database protection mechanisms, and intrusion detection systems.",

keywords = "DB users tracking, auditing, web users tracking",

author = "Boris Rozenberg and Yaron Gonen and Ehud Gudes and Nurit Gal-Oz and Erez Shmueli",

year = "2011",

month = nov,

day = "17",

doi = "10.1109/ICNSS.2011.6059966",

language = "English",

isbn = "9781457704598",

series = "Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011",

pages = "105--112",

booktitle = "Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011",

note = "2011 5th International Conference on Network and System Security, NSS 2011 ; Conference date: 06-09-2011 Through 08-09-2011",

}

Rozenberg, B, Gonen, Y, Gudes, E, Gal-Oz, N & Shmueli, E 2011, Tracking end-users in web databases. in Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011., 6059966, Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011, pp. 105-112, 2011 5th International Conference on Network and System Security, NSS 2011, Milan, Italy, 6/09/11. https://doi.org/10.1109/ICNSS.2011.6059966

Tracking end-users in web databases. / Rozenberg, Boris; Gonen, Yaron; Gudes, Ehud et al.
Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011. 2011. p. 105-112 6059966 (Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Tracking end-users in web databases

AU - Rozenberg, Boris

AU - Gonen, Yaron

AU - Gudes, Ehud

AU - Gal-Oz, Nurit

AU - Shmueli, Erez

PY - 2011/11/17

Y1 - 2011/11/17

N2 - When a database is accessed via a web application, users usually receive a pooled connection to the database. From a database point of view, such a connection is always established by the same user (i.e. the web application) and specific data on the end user is not available. As a consequence, users' specific transactions cannot be audited and fine-grained access control cannot be enforced at the database level. In this paper we propose a method and a system which provide the ability to track the end users in web databases. The new method can be applied to legacy web applications without requiring any changes in their existing infrastructure. Furthermore, the new users tracking ability provides a basis for native database protection mechanisms, and intrusion detection systems.

AB - When a database is accessed via a web application, users usually receive a pooled connection to the database. From a database point of view, such a connection is always established by the same user (i.e. the web application) and specific data on the end user is not available. As a consequence, users' specific transactions cannot be audited and fine-grained access control cannot be enforced at the database level. In this paper we propose a method and a system which provide the ability to track the end users in web databases. The new method can be applied to legacy web applications without requiring any changes in their existing infrastructure. Furthermore, the new users tracking ability provides a basis for native database protection mechanisms, and intrusion detection systems.

KW - DB users tracking

KW - auditing

KW - web users tracking

UR - http://www.scopus.com/inward/record.url?scp=81055155526&partnerID=8YFLogxK

U2 - 10.1109/ICNSS.2011.6059966

DO - 10.1109/ICNSS.2011.6059966

M3 - Conference contribution

AN - SCOPUS:81055155526

SN - 9781457704598

T3 - Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011

SP - 105

EP - 112

BT - Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011

T2 - 2011 5th International Conference on Network and System Security, NSS 2011

Y2 - 6 September 2011 through 8 September 2011

ER -

Tracking end-users in web databases

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this